Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(poc): test actions-package-update GH action #1002

Closed
wants to merge 15 commits into from

Conversation

csouchet
Copy link
Member

@csouchet csouchet commented May 11, 2023

Covers #668

@csouchet csouchet added the chore Build, CI/CD or repository tasks (issues/PR maintenance, environments, ...) label May 11, 2023
@csouchet csouchet force-pushed the poc/test_actions-package-update branch 3 times, most recently from 168341a to ebe73d8 Compare May 12, 2023 07:35
@csouchet
Copy link
Member Author

ℹ️ I created a fix PR on the repository of the GH action, because there is a weird behaviour on how to set the token for Ocktopit: taichi/actions-package-update#38.
It may be explain the error on our workflow, because after checking the token, the token user rights on the repository, and the use of this token on other repositories, there is no reason to have no right to push the code on this repository.

@tbouffard
Copy link
Member

I suggest finding alternatives to using this action.
Although it updates dependencies automatically, it does not provide any information about the changelog content. This is a major piece of information that helps decide whether or not to update a dependency, especially when there are no automatic tests, as here.

Notice that dependabot recently introduced a way to group dependency update: https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/

@csouchet
Copy link
Member Author

csouchet commented Jul 7, 2023

Done in #1041

@csouchet csouchet force-pushed the poc/test_actions-package-update branch from 1b39c77 to 75b7366 Compare August 3, 2023 12:27
@csouchet
Copy link
Member Author

As nothing happening in taichi/actions-package-update#38, and we use now the beta version of dependabot group feature, I close this PR.

Be free to reopen it, if there is something new.

@csouchet csouchet closed this Aug 18, 2023
@csouchet csouchet deleted the poc/test_actions-package-update branch August 18, 2023 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore Build, CI/CD or repository tasks (issues/PR maintenance, environments, ...)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants